CN-Series firewall now supports real-time Advanced Threat Prevention (ATP) for detecting malware and zero-day vulnerability exploits using the advanced ML engines in the cloud. The CN-Series ATP is delivered as a containerized solution for high scalability and low-latency cloud-native service.

The ATP feature is supported on PAN-OS 11.0 and later releases and all CN-Series deployment modes: deploying the CN-Series firewall as a Kubernetes service, Daemonset, and a Kubernetes CNF. For the ATP feature, you need the Advanced Threat Prevention licenses and enable the Inline Cloud Analysis.

To enable the CN-Series ATP feature, you can use the YAML files from the Palo Alto Networks CSP for deploying the containerized firewall pods or enable the ATP feature while configuring the CN-Series deployment on the Palo Alto Customer Service Portal (CSP).